Sanction RGPD Spanish Data Protection Authority (aepd) — EXCEL HOTELS & RESORTS, S.A. : 32 k€ (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- EXCEL HOTELS & RESORTS, S.A.
- Montant de l'amende
- 32 k€
- Date de la décision
- 20 décembre 2025
- Fondement juridique
- Art. 5 (1) f)
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Spanish DPA has imposed a fine of EUR 32,000 on EXCEL HOTELS & RESORTS, S.A. The controller used guards to control access to its facility. The guards regularly left documents containing personal data in their post, making them accessible to third parties. The original fine of EUR 40,000 was reduced to EUR 32,000 due to immediate payment.